Changing Master Password

English support forum

Moderators: sheep, Hacker, Stefan2, white

Post Reply
User avatar
Hacker
Moderator
Moderator
Posts: 11445
Joined: 2003-02-06, 14:56 UTC
Location: Bratislava, Slovakia

Changing Master Password

Post by *Hacker » 2019-12-14, 12:39 UTC

Hi all,
TC 9.50b9 x64, Windows 10 x64 v1903.

I am using a master password, "OldPassword". I used it to store the login credentials to my Google Drive in the Cloud plugin.
Then I realized I would like to change my old master password, so I did Ctrl-F - Encrypt... - Change master password... - "OldPassword" - confirm - "NewPassword" - "NewPassword".

Now, whenever I login to my Google Drive using the Cloud plugin and TC asks me to enter my Master Password, I have to enter "OldPassword".
However, when I want to change the master password to another one, I need to enter "NewPassword".

Is this normal? Does changing the master password not change the password for encrypting the connection credentials stored using the old password?

TIA
Roman
Mal angenommen, du drückst Strg+F, wählst die FTP-Verbindung (mit gespeichertem Passwort), klickst aber nicht auf Verbinden, sondern fällst tot um.

User avatar
ghisler(Author)
Site Admin
Site Admin
Posts: 38738
Joined: 2003-02-04, 09:46 UTC
Location: Switzerland
Contact:

Re: Changing Master Password

Post by *ghisler(Author) » 2019-12-16, 10:59 UTC

No, it should use the new master password also for plugins.

Try unchecking the option to store the login credentials in the plugin and then re-enable it to save the creditials with the new password.
Author of Total Commander
http://www.ghisler.com

User avatar
Hacker
Moderator
Moderator
Posts: 11445
Joined: 2003-02-06, 14:56 UTC
Location: Bratislava, Slovakia

Re: Changing Master Password

Post by *Hacker » 2019-12-17, 23:45 UTC

Christian,
Try unchecking the option to store the login credentials in the plugin and then re-enable it to save the creditials with the new password.
Yes, this works, but I definitely consider this incorrect and dangerous behavior. By changing the master password I assume all the data that has been protected by the old (potentially compromised) master password is now protected by the new one. I would not expect that only newly entered passwords are protected and I either need to resave all old passwords or keep a history of (potentially unsafe) all my previous master passwords.

Roman
Mal angenommen, du drückst Strg+F, wählst die FTP-Verbindung (mit gespeichertem Passwort), klickst aber nicht auf Verbinden, sondern fällst tot um.

Post Reply